Penetration testing

We test your defenses the way an attacker would, on web applications, mobile apps, wireless networks and VoIP, then show you how to fix what we find.

What you gain

Find weaknesses first
We find problems under agreed rules before someone with bad intentions does.
Evidence, not guesses
Findings show what an attacker could actually reach, so you can judge the real risk.
Fixes you can apply
Each finding comes with guidance on how to close it.
Confidence in your controls
You learn which protections work and which need attention.

The steps we follow for this service.

Scope
We agree what will be tested, how and when, so testing is safe and focused.
Test
We probe the targets from an attacker's point of view, with manual techniques and specialist tools.
Report
You receive the findings with their severity and clear guidance on fixing them.
Retest
Once you have fixed the issues, we check that the fixes work.

Web application testing
Testing of web applications for weaknesses in logic, input handling, authentication and access control.
Mobile application testing
Testing of mobile apps and of how they store data and talk to back-end services.
Wireless and VoIP testing
Assessment of wireless networks and voice-over-IP systems for weak settings and ways in.
Vulnerability assessment
Scanning and verification of weaknesses across infrastructure and web applications, with tools such as Nessus, Qualys and Burp Suite.

Tell us about your environment and what you want to achieve, and we will reply with how we would approach it.